[CLSA-2026:1786029018] expat: Fix of CVE-2026-56407
Type:
security
Severity:
Important
Release date:
2026-08-06 15:10:29 UTC
Description:
- CVE-2026-56407: signed integer overflow in doProlog() when an internal entity value longer than INT_MAX XML_Chars truncates ENTITY.textLen to a negative length
CVEs fixed:
Updated packages:
  • expat-2.0.1-13.el6_8.tuxcare.els11.i686.rpm
    sha:656f1d342d6cdb53630323a45e7ecd56cf0a1417a105fa4899ab6117c1fe75bd
  • expat-2.0.1-13.el6_8.tuxcare.els11.x86_64.rpm
    sha:18ba0bf4ca161532dc103625ad9963b8d1eb0963af86c133f55ff75fca0ee325
  • expat-devel-2.0.1-13.el6_8.tuxcare.els11.i686.rpm
    sha:2397f92030f9b640f467ec592776ca4dee930d47437612df80f206b1e56a7bd7
  • expat-devel-2.0.1-13.el6_8.tuxcare.els11.x86_64.rpm
    sha:042aec4111f583a2f5d160cc047aec5eee0333cb5c619b8c579cbd936e723be6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.